diff --git a/doc/src/sgml/ref/grant.sgml b/doc/src/sgml/ref/grant.sgml index ff64c7a3ba..650601965b 100644 --- a/doc/src/sgml/ref/grant.sgml +++ b/doc/src/sgml/ref/grant.sgml @@ -175,6 +175,8 @@ GRANT role_name [, ...] TO EXECUTE privilege for functions and procedures; and USAGE privilege for languages and data types (including domains). + summarizes the hardcoded + default privileges granted to all object's types. The object owner can, of course, REVOKE both default and expressly granted privileges. (For maximum security, issue the REVOKE in the same transaction that @@ -205,6 +207,9 @@ GRANT role_name [, ...] TO currval function. For large objects, this privilege allows the object to be read. + + This privilege is abbreviated r when displayed. + @@ -218,6 +223,9 @@ GRANT role_name [, ...] TO FROM. + + This privilege is abbreviated a when displayed. + @@ -240,6 +248,9 @@ GRANT role_name [, ...] TO + + This privilege is abbreviated w when displayed. + @@ -253,6 +264,9 @@ GRANT role_name [, ...] TO SELECT privilege as well, since it must reference table columns to determine which rows to delete.) + + This privilege is abbreviated d when displayed. + @@ -263,6 +277,9 @@ GRANT role_name [, ...] TO on the specified table. + + This privilege is abbreviated D when displayed. + @@ -274,6 +291,9 @@ GRANT role_name [, ...] TO statement.) + + This privilege is abbreviated x when displayed. + @@ -284,6 +304,9 @@ GRANT role_name [, ...] TO statement.) + + This privilege is abbreviated t when displayed. + @@ -304,6 +327,9 @@ GRANT role_name [, ...] TO + + This privilege is abbreviated C when displayed. + @@ -315,6 +341,9 @@ GRANT role_name [, ...] TO pg_hba.conf). + + This privilege is abbreviated c when displayed. + @@ -325,6 +354,9 @@ GRANT role_name [, ...] TO Allows temporary tables to be created while using the specified database. + + This privilege is abbreviated T when displayed. + @@ -339,6 +371,9 @@ GRANT role_name [, ...] TO ROUTINE to refer to a function, aggregate function, or procedure regardless of what it is. + + This privilege is abbreviated X when displayed. + @@ -382,6 +417,9 @@ GRANT role_name [, ...] TO + + This privilege is abbreviated U when displayed. + @@ -627,6 +665,95 @@ GRANT ALL PRIVILEGES ON kinds TO manuel; GRANT admins TO joe; + + + Default hardcoded access privileges per object's type + + + + Object's type + psql \-command + Owner + PUBLIC + + + + + DATABASE + \l + CTc + Tc + + + DOMAIN + \dD+ + U + U + + + FUNCTION or PROCEDURE + \df+ + X + X + + + FOREIGN DATA WRAPPER + \dew+ + U + + + + FOREIGN SERVER + \des+ + U + + + + LANGUAGE + \dL+ + U + U + + + LARGE OBJECT + + rw + + + + SCHEMA + \dn+ + UC + + + + SEQUENCE + \dp + rwU + + + + TABLE and relation-like objects + \dp + arwdDxt + + + + TABLESPACE + \db+ + C + + + + TYPE + \dT+ + U + U + + + +
+